Description
The Air Force Lifecycle Management Center (AFLCMC) is seeking sources who can provide software licenses with capabilities that meet the requirements of the attached "Draft" Statement of Work (SOW) for Software Bill of Materials (SBOM) Generation & Vulnerability Analysis Solution. The contractor shall provide licenses, software, technical support, implementation assistance, and sustainment services necessary to deliver a production-ready solution across classified and unclassified cloud environments. The solution must comply with DoD cybersecurity requirements, enable deployment within secure enclaves, support role-based access control (RBAC), logging, and auditing, and align to Zero Trust principles.
Some key requirements of the solution include:
* Generating SBOMs that comply with accepted industry standards
* Providing an API and/or CLI to generate SBOMs during the build process
* Scanning container images for vulnerabilities
* Mapping identified vulnerabilities to industry-standard severity metrics
* Tracking changes over time to detect new vulnerabilities
* Providing a GUI to display compliance standard items
* Generating comprehensive reports listing all identified components, licenses, and known vulnerabilities.
Attached files
Contact
(210) 925-6490